While trying to isolate a customers hi data usage I checked two different 'outlets'. First, I created a report that pulls the NetFlow data from the NetFlow Groups. Second I went directly into NetFlow and did a search using the nodes IP address. The report shows an ingress of 16.6 MB, and egress of 16.6 MB, and a total of 33.45 MB. But when I go into NetFlow and search by the node IP address I see 65 MB of traffic. Anyone have an idea why these numbers would be so different?